QuestionQ140

Design security solutions for applications and data

You use Azure Pipelines together with Azure Repos to implement continuous integration and continuous deployment (CI/CD) workflows for deploying applications to Azure.

You need to recommend what to include in dynamic application security testing (DAST) according to the principles of the Microsoft Cloud Adoption Framework for Azure.

What should you recommend?

  • A unit testing
  • B penetration testing
  • C dependency checks
  • D threat modeling
Explanation

Dynamic application security testing evaluates an application while it is running to identify security vulnerabilities. Microsoft recommends performing DAST with assistance from a security professional, such as a penetration tester or vulnerability assessor.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!